MicroHacker Forum

Online community for electronics and microcontroller reverse engineering
https://microhacker.denkdose.de/

Ford Mondeo MK4 CAN-DB

https://microhacker.denkdose.de/viewtopic.php?t=155

Page 3 of 7

Re: Ford Mondeo MK4 CAN-DB

Posted: 24 Feb 2020, 16:14
by Go4IT
As for the gauge, it could be that it is the value but needs sone configurartion data to be send from BCM because there are also different tank types available?! Maybe check the data in a real car or try to send a tracefile where you replace the fuel data bytes with an value?

Re: Ford Mondeo MK4 CAN-DB

Posted: 24 Feb 2020, 18:17
by ronald0001
so i played around with id 08b
d5 xD
d6 00

so have d00
in dez 3328
binary 110100000000
shows me full fuel

f ff is empty

here only 08b from cantrace

Code: Select all

f 38 00 1E 6A 50 
28,120 08B      8 00 0E 0E 38 00 1E 6A 50 
28,301 08B      8 00 0E 17 38 00 1E 6A 50 
28,481 08B      8 00 0E 03 38 00 1E 6A 50 
28,660 08B      8 00 0E 1E 38 00 1E 75 50 
28,841 08B      8 00 0E 3B 38 00 1E 7A 50 
29,020 08B      8 00 0E 55 38 00 1E 7B 50 
29,200 08B      8 00 0E 6C 38 00 1E 82 50 
29,380 08B      8 00 0E 56 38 00 1E 8E 50 
29,560 08B      8 00 0E 53 38 00 1E 98 50 
29,741 08B      8 00 0E 5A 38 00 1E 98 50 
29,920 08B      8 00 0E 41 38 00 1E 98 50 
30,100 08B      8 00 0E 22 38 00 1E 8B 50 
30,280 08B      8 00 0E 18 38 00 1E 71 50 
30,460 08B      8 00 0D FC 38 00 1E 63 50 
30,641 08B      8 00 0D E5 38 00 1E 62 50 
30,820 08B      8 00 0D CF 38 00 1E 6A 50 
31,000 08B      8 00 0D B8 38 00 1E 65 50 
31,180 08B      8 00 0D 99 38 00 1E 6D 50 
31,360 08B      8 00 0D 72 38 00 1E 63 50 
31,541 08B      8 00 0D 4F 38 00 1E 63 50 
31,720 08B      8 00 0D 16 38 00 1E 55 50 
31,900 08B      8 00 0C EC 38 00 1E 55 50 
32,080 08B      8 00 0C CD 38 00 1E 63 50 
32,260 08B      8 00 0C A6 38 00 1E 5B 50 
32,441 08B      8 00 0C 6C 38 00 1E 63 50 
32,620 08B      8 00 0C 20 38 00 1E 63 50 
32,801 08B      8 00 0B C6 38 00 1E 58 50 
32,980 08B      8 00 0B 69 38 00 1E 4B 50 
33,160 08B      8 00 0B 0E 38 00 1E 42 50 
33,341 08B      8 00 0A 9E 38 00 1E 42 50 
33,520 08B      8 00 0A 29 38 00 1E 3E 50 
33,700 08B      8 00 09 B5 38 00 1E 3D 50 
33,880 08B      8 00 09 32 38 00 1E 35 50 
34,060 08B      8 00 08 AD 38 00 1E 31 50 
34,241 08B      8 00 08 23 38 00 1E 39 50 
34,420 08B      8 00 07 96 38 00 1E 31 50 
34,600 08B      8 00 07 05 38 00 1E 2D 50 
34,780 08B      8 00 06 82 38 00 1E 32 50 
34,960 08B      8 00 06 02 38 00 1E 35 50 
35,141 08B      8 00 05 70 38 00 1E 35 50 
35,320 08B      8 00 04 F2 38 00 1E 2D 50 
35,500 08B      8 00 04 81 38 00 1E 32 50 
35,680 08B      8 00 04 16 38 00 1E 31 50 
35,860 08B      8 00 03 A5 38 00 1E 32 50 
36,041 08B      8 00 03 47 38 00 1E 32 50 
36,220 08B      8 00 02 D9 38 00 1E 32 50 
36,400 08B      8 00 02 7B 38 00 1E 34 50 
36,580 08B      8 00 02 3A 38 00 1E 34 50 
36,760 08B      8 00 02 0B 38 00 1E 37 50 
36,941 08B      8 00 01 EA 38 00 1E 37 50 
37,120 08B      8 00 01 D6 38 00 1E 3D 50 
37,302 08B      8 00 01 C8 38 00 1E 58 50 
37,480 08B      8 00 01 BB 38 00 1E 6F 50 
37,660 08B      8 00 01 AA 38 00 1E 6F 50 
37,841 08B      8 00 01 94 38 00 1E 78 50 
38,020 08B      8 00 01 76 38 00 1E 66 50 
38,200 08B      8 00 01 60 38 00 1E 54 50 
38,380 08B      8 00 01 49 38 00 1E 54 50 
38,560 08B      8 00 01 33 38 00 1E 4C 50 
38,741 08B      8 00 01 1D 38 00 1E 4C 50 
38,920 08B      8 00 01 0E 38 00 1E 4F 50 
39,100 08B      8 00 01 03 38 00 1E 62 50 
39,280 08B      8 00 00 F2 38 00 1E 6C 50 
39,460 08B      8 00 00 E9 38 00 1E 69 50 
39,643 08B      8 00 00 DE 38 00 1E 6C 50 
39,820 08B      8 00 00 D6 38 00 1E 69 50 
40,000 08B      8 00 00 C9 38 00 1E 69 50 
40,180 08B      8 00 00 BE 38 00 1E 69 50 
40,360 08B      8 00 00 B2 38 00 1E 66 50 
40,542 08B      8 00 00 A6 38 00 1E 66 50 
40,720 08B      8 00 00 9D 38 00 1E 5F 50 
40,900 08B      8 00 00 93 38 00 1E 66 50 
41,080 08B      8 00 00 87 38 00 1E 62 50 
41,260 08B      8 00 00 7E 38 00 1E 62 50 
41,441 08B      8 00 00 73 38 00 1E 65 50 
41,620 08B      8 00 00 6C 38 00 1E 65 50 
41,801 08B      8 00 00 62 38 00 1E 5E 50 
41,980 08B      8 00 00 57 38 00 1E 60 50 
42,160 08B      8 00 00 4C 38 00 1E 60 50 
42,341 08B      8 00 00 00 38 00 1E 60 50 
42,520 08B      8 00 00 00 38 00 1E 58 50 
42,700 08B      8 00 00 00 38 00 1E 5C 50 
42,880 08B      8 00 00 00 38 00 1E 66 50 
43,060 08B      8 00 00 00 38 00 1E 64 50 
43,241 08B      8 00 00 00 38 00 1E 64 50 
43,420 08B      8 00 00 88 38 00 1E 6D 50 
43,600 08B      8 00 00 AE 38 00 1E 78 50 
43,780 08B      8 00 00 A3 38 00 1E 8E 50 
43,960 08B      8 00 00 85 38 00 1E 8E 50 
44,142 08B      8 00 00 6C 38 00 1E 8E 50 
44,320 08B      8 00 00 5C 38 00 1E 83 50 
44,500 08B      8 00 00 70 38 00 1E 6C 50 
44,680 08B      8 00 00 A1 38 00 1E 50 50 
44,860 08B      8 00 00 D7 38 00 1E 50 50 
45,041 08B      8 00 01 05 38 00 1E 6E 50 
45,220 08B      8 00 01 34 38 00 1E 96 50 
45,400 08B      8 00 01 75 38 00 1E A3 50 
45,580 08B      8 00 01 D9 38 00 1E A3 50 
45,760 08B      8 00 02 53 38 00 1E 96 50 
45,941 08B      8 00 02 CB 38 00 1E 96 50 
46,120 08B      8 00 03 41 38 00 1E 96 50 
46,301 08B      8 00 03 AF 38 00 1E 9F 50 
46,480 08B      8 00 04 25 38 00 1E CC 50 
46,660 08B      8 00 04 AE 38 00 1E FD 50 
46,841 08B      8 00 04 DB 38 00 1F 0E 50 
47,020 08B      8 00 04 05 38 00 1F 0E 50 
47,201 08B      8 00 03 09 38 00 1E D8 50 
47,380 08B      8 00 01 FF 38 00 1E B3 50 
47,560 08B      8 00 01 29 38 00 1E B3 50 
47,741 08B      8 00 00 8E 38 00 1E B3 50 
47,920 08B      8 00 00 00 38 00 1E C9 50 
48,100 08B      8 00 00 00 38 00 1F 14 50 
48,280 08B      8 00 00 00 38 00 1F 32 50 
48,460 08B      8 00 00 00 38 00 1F 32 50 
48,641 08B      8 00 00 00 38 00 1E FF 50 
48,820 08B      8 00 00 00 38 00 1E BF 50 
49,000 08B      8 00 00 00 38 00 1E 84 50 
49,180 08B      8 00 00 00 38 00 1E 6F 50 
49,360 08B      8 00 00 54 38 00 1E 73 50 
49,541 08B      8 00 00 AB 38 00 1E 73 50 
49,720 08B      8 00 01 1B 38 00 1E 73 50 
49,900 08B      8 00 01 9F 38 00 1E 95 50 
50,080 08B      8 00 02 15 38 00 1E BE 50 
50,260 08B      8 00 02 82 38 00 1E DA 50 
50,442 08B      8 00 02 E0 38 00 1E EE 50 
50,620 08B      8 00 03 35 38 00 1E EE 50 
50,801 08B      8 00 03 82 38 00 1E DE 50 
50,980 08B      8 00 03 CA 38 00 1E B8 50 
51,160 08B      8 00 04 16 38 00 1E A6 50 
51,341 08B      8 00 04 62 38 00 1E A6 50 
51,520 08B      8 00 04 A7 38 00 1E 96 50 
51,700 08B      8 00 04 DE 38 00 1E 96 50 
51,880 08B      8 00 05 19 38 00 1E A7 50 
52,060 08B      8 00 05 4D 38 00 1E A7 50 
52,241 08B      8 00 05 72 38 00 1E A0 50 
52,420 08B      8 00 05 8E 38 00 1E 8E 50 
52,600 08B      8 00 05 AE 38 00 1E 75 50 
52,780 08B      8 00 05 CC 38 00 1E 6B 50 
52,960 08B      8 00 05 F6 38 00 1E 6B 50 
53,143 08B      8 00 06 00 38 00 1E 6B 50 
53,320 08B      8 00 06 11 38 00 1E 7A 50 
53,500 08B      8 00 06 1B 38 00 1E 8D 50 
53,680 08B      8 00 06 19 38 00 1E AF 50 
53,860 08B      8 00 06 1B 38 00 1E D8 50 
54,042 08B      8 00 06 1C 38 00 1E FE 50 
54,220 08B      8 00 06 15 38 00 1F 09 50 
54,400 08B      8 00 06 0A 38 00 1F 09 50 
54,580 08B      8 00 05 F3 38 00 1E F9 50 
54,760 08B      8 00 05 E3 38 00 1E DC 50 
54,942 08B      8 00 05 D4 38 00 1E DC 50 
55,120 08B      8 00 05 C9 38 00 1E BA 50 
55,302 08B      8 00 05 BD 38 00 1E B1 50 
55,480 08B      8 00 05 AD 38 00 1E AE 50 
55,661 08B      8 00 05 9C 38 00 1E BA 50 
55,842 08B      8 00 05 95 38 00 1E B7 50 
56,020 08B      8 00 05 41 38 00 1E BD 50 
56,200 08B      8 00 04 DF 38 00 1E B7 50 
56,380 08B      8 00 04 76 38 00 1E AC 50 
56,559 08B      8 00 04 05 38 00 1E 95 50 
56,742 08B      8 00 03 9E 38 00 1E 95 50 
56,919 08B      8 00 03 43 38 00 1E 74 50 
57,100 08B      8 00 02 EE 38 00 1E 68 50 
57,279 08B      8 00 02 CC 38 00 1E 5B 50 
57,459 08B      8 00 02 D1 38 00 1E 52 50 
57,642 08B      8 00 02 D6 38 00 1E 5F 50 
57,819 08B      8 00 02 E0 38 00 1E 6B 50 
58,000 08B      8 00 02 FF 38 00 1E 7B 50 
58,180 08B      8 00 03 2B 38 00 1E 9A 50 
58,360 08B      8 00 03 66 38 00 1E BD 50 
58,541 08B      8 00 03 AF 38 00 1E BD 50 
58,719 08B      8 00 04 12 38 00 1E E6 50 
58,899 08B      8 00 04 6A 38 00 1E F9 50 
59,079 08B      8 00 04 D3 38 00 1F 00 50 
59,259 08B      8 00 05 23 38 00 1F 0B 50 
59,442 08B      8 00 05 6C 38 00 1F 01 50 
59,619 08B      8 00 05 9B 38 00 1E F6 50 
59,800 08B      8 00 05 A7 38 00 1E F6 50 
59,980 08B      8 00 05 A9 38 00 1E EF 50 
00,159 08B      8 00 05 92 38 00 1E DE 50 
00,342 08B      8 00 05 70 38 00 1E DE 50 
00,519 08B      8 00 05 29 38 00 1E CF 50 
00,699 08B      8 00 04 C5 38 00 1E B8 50 
00,879 08B      8 00 04 4D 38 00 1E 8A 50 
01,059 08B      8 00 03 E6 38 00 1E 5F 50 
01,242 08B      8 00 03 71 38 00 1E 47 50
seems d1 change allmost with +1
about d2 i have no idea
d3+d5always same with 38 and 00
also d7 is always 50
but d7 the secound bit have also a funktion
on 1 to 4 it shows gear to hot push the break in ipc
and d5 first bit shows preheat sing in ipc

message also change if engin is stopped/not running

00 00 00 38 00 9x xx 50

also in testmenu shows when is full percentage 5D
for full
01
02
03
04
05
06
07
08
09
10
1a
1b
1c
1d
20....and so on

Re: Ford Mondeo MK4 CAN-DB

Posted: 24 Feb 2020, 19:10
by ronald0001
later i go to gasstation and but it full

easiest way to compare....

Re: Ford Mondeo MK4 CAN-DB

Posted: 25 Feb 2020, 06:25
by Go4IT
ronald0001 wrote: ↑24 Feb 2020, 19:10 later i go to gasstation and but it full easiest way to compare....
That's excactly what i did to get it. Here where my logs.

.S. Please add photos to IPC messages/symbols you found. That would help.

Re: Ford Mondeo MK4 CAN-DB

Posted: 25 Feb 2020, 12:41
by ronald0001
ok i will do later afternoon/evening

Re: Ford Mondeo MK4 CAN-DB

Posted: 25 Feb 2020, 19:31
by ronald0001
hi at all
i was wondering how the ipc get´s the gearshift level from automatic
cuz when i play a trace in canhacker ipc not show me p r n d

Re: Ford Mondeo MK4 CAN-DB

Posted: 25 Feb 2020, 19:43
by ronald0001
id 08B xx xx xx xx xx xx x1
20200225_203804.jpg
id 08B xx xx xx xx xx xx x2
20200225_203808.jpg
id 08B xx xx xx xx xx xx x3
20200225_203815.jpg
id 08B xx xx xx xx xx xx x4
20200225_203824.jpg

Re: Ford Mondeo MK4 CAN-DB

Posted: 25 Feb 2020, 19:47
by ronald0001
id 08B xx xx xx xx 4x xx xx
id 08B xx xx xx xx 5x xx xx
id 08B xx xx xx xx 6x xx xx
20200225_204512[1].jpg

Re: Ford Mondeo MK4 CAN-DB

Posted: 26 Feb 2020, 08:13
by ronald0001
i wonder how the ipc got the gear position...of automatic
cuz every time i play a trace its not show me PRND....this field is always empty

Re: Ford Mondeo MK4 CAN-DB

Posted: 13 Mar 2020, 20:15
by Go4IT
Added HS-CAN IDs to DB from:

Yaw-Rate Sensor (6G91-3C187-AG): ID 188
Sends every 10 ms on HS-CAN from the moment power is applied to it. It seems not to have ignition status dependency.
The first 4 bytes of the message (D0-D3) changes on moving the unit. The later 4 bytes seems to be static "00 01 1F FF".
Currently no clue what those bytes values mean.

ABS-Module (AG91-14C205-AA IVD, no acc, no hillassist): ID 1F4, 206, 22A, 23C, 24E, 260, 296
Send every 20 ms on HS-CAN. The module has en ECU-Enable input (+12V) comming via BCM and an IGNITION input, coming from BCM.
Currently no clue what the contents of the bytes means, but maybe ID 296 contains cummulated wheelspeed on D2+D3.
All four wheel sensors are directly connected to the ABS module.
All times are UTC
Page 3 of 7

Powered by phpBB® Forum Software © phpBB Limited